My website is secure (HTTPS) but has some images that are HTTP. I have two questions:

  1. Is it an issue? I checked on HubSpot SSL checker and it says that my website is secure.

  2. How do I find and change all of the HTTP elements? I'm not a developer so a detailed description would be really helpful and I'd really appreciate it. I have access to the back end of the Wordpress site as well as the host.


There is a plugin for WordPress called SSL Insecure Content Fixer that will automatically change any calls to content from http to https.

You can also use a find-and-replace plugin or use wp-cli to do a database-wide search for "http:" and replace it with "https:" but you run the risk of breaking links to sites that do not have SSL enabled.

  1. If you have a secure page (HTML delivered via HTTPS) that calls an image or any resource from a source that is not secure, the page will now be considered overall not secure. ... Mixed content affects the way your webpage is displayed by browsers.

  2. WordPress stores the full image URL in its post database.

So after turning the website to HTTPS, you have to rewrite every image src in your posts with the new HTTPS address. In backoffice, just deleting old image and replace it with the same should do the trick.

If you have a large number of posts, some plugins could help you convert HTTP to HTTPS. Or ask a developer to replace them in the database.

Then, depending on the Theme you are using, the developer should also replace links to scripts, CSS... with HTTPS. But if you are running an official or recent Theme, it should already be good.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.